Lucene search
+L

CVE-2019-18895

🗓️ 14 Nov 2019 14:00:16Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 88 Views🌐 WEB

Scanguard on Windows has insecure installation directory permissions, leading to privilege escalation

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
zdt
zdt
ScanGuard Antivirus 2020 - Insecure Folder Permissions Exploit
13 Nov 201900:00
zdt
circl
Circl
CVE-2019-18895
20 Feb 202414:51
circl
cnvd
CNVD
Scanguard Insecure Privilege Vulnerability
13 Nov 201900:00
cnvd
cvelist
Cvelist
CVE-2019-18895
14 Nov 201914:00
cvelist
exploitdb
Exploit DB
ScanGuard Antivirus 2020 - Insecure Folder Permissions
13 Nov 201900:00
exploitdb
euvd
EUVD
EUVD-2019-8577
7 Oct 202500:30
euvd
exploitpack
exploitpack
ScanGuard Antivirus 2020 - Insecure Folder Permissions
13 Nov 201900:00
exploitpack
nvd
NVD
CVE-2019-18895
14 Nov 201914:15
nvd
osv
OSV
CVE-2019-18895
14 Nov 201914:15
osv
packetstorm
Packet Storm
ScanGuard Antivirus Insecure Permissions
13 Nov 201900:00
packetstorm
Rows per page
NVD
Node
ParameterPositionPathDescriptionCWE
C:\Program Files (x86)\ScanGuard\ScanGuard.exepathC:\Program Files (x86)\ScanGuard\ScanGuard.exeVulnerable ScanGuard executable path subject to insecure permissions enabling replacement by an attacker.CWE-732
C:\Program Files (x86)\ScanGuard\~.confpathC:\Program Files (x86)\ScanGuard\~.confDisabled target file used by PoC to swap out the legitimate executable during exploitation.CWE-732
c:\Program Files (x86)\ScanGuard\ScamGuard.lnkpathc:\Program Files (x86)\ScanGuard\ScamGuard.lnkMalicious link created by PoC to hijack execution after replacing the legitimate binary.CWE-732

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 02:25Current
7.7High risk
Vulners AI Score7.7
CVSS 24.6
CVSS 3.17.8
EPSS0.00518
88